Control: Key vaults should have soft delete enabled
Description
Deleting a key vault without soft delete enabled permanently deletes all secrets, keys, and certificates stored in the key vault. Accidental deletion of a key vault can lead to permanent data loss. Soft delete allows you to recover an accidentally deleted key vault for a configurable retention period.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.keyvault_soft_delete_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.keyvault_soft_delete_enabled --shareSQL
This control uses a named query:
keyvault_soft_delete_enabled